The difference between identity awareness license and user directory is that the IA Blade is a free blade. Using it will populate logs with user names instead of IPs only. To use AD for RA VPN authentication, you will need a UD license, see sk77020 for details.